CVE-2021-26252: Buffer Overflow
Published Jun 2, 2021
·Updated
A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in pspdfpreparepage(),in ps-pdf.cxx may lead to execute arbitrary code and denial of service.
Affected Software
5 affected componentsFixes available
redhat/htmldoc<1.9.15
1.9.15
debian/htmldoc
1.9.11-4+deb11u31.9.16-11.9.20-1
Htmldoc Project Htmldoc=1.9.12
redhat Enterprise Linux=7.0
Fedoraproject Fedora=34
Remediation
Patch Available
Event History
Feb 24, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Jan 12, 2025
Data Sourced
via Ubuntu·04:22 AM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·04:23 AM
Description
Frequently Asked Questions
1
What is CVE-2021-26252?
CVE-2021-26252 is a vulnerability in htmldoc v1.9.12 that allows a heap buffer overflow in pspdf_prepare_page(), potentially leading to arbitrary code execution and denial of service.
2
How severe is the vulnerability CVE-2021-26252?
The severity of vulnerability CVE-2021-26252 is high with a CVSS score of 7.8.
3
What software versions are affected by CVE-2021-26252?
The affected software versions include htmldoc v1.9.12, Redhat Enterprise Linux 7.0, and Fedora 34.
4
How can I fix the vulnerability CVE-2021-26252?
To fix the vulnerability CVE-2021-26252, update htmldoc to version 1.9.15.
5
What are the references for CVE-2021-26252?
The references for CVE-2021-26252 include Bugzilla Red Hat advisory, GitHub issue, and GitHub commit.